Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E0FE/37334BE2ABCA11EFA994D129C4F9AE02/sCeV0uCeOqo-NtK1ktLg6fu3770.mft
File: sCeV0uCeOqo-NtK1ktLg6fu3770.mft (raw, json)
Hash identifier: aZqar6E+u9YMT8nea7g2KWOD1Z4IuoqrenWYJSS16cI=
Subject key identifier: 21:BE:F8:1E:FD:53:9F:CE:19:9B:D8:DE:6D:CC:7F:E0:AE:E8:2F:C1
Authority key identifier: B0:27:95:D2:E0:9E:3A:AA:3E:36:D2:B5:92:D2:E0:E9:FB:B7:EF:BD
Certificate issuer: /CN=A914E0FE/serialNumber=B02795D2E09E3AAA3E36D2B592D2E0E9FBB7EFBD
Certificate serial: 26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCeV0uCeOqo-NtK1ktLg6fu3770.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E0FE/37334BE2ABCA11EFA994D129C4F9AE02/sCeV0uCeOqo-NtK1ktLg6fu3770.mft
Manifest number: 25
Signing time: Fri 31 Jan 2025 06:53:16 +0000
Manifest this update: Fri 31 Jan 2025 06:53:15 +0000
Manifest next update: Fri 07 Feb 2025 06:53:15 +0000
Files and hashes: 1: sCeV0uCeOqo-NtK1ktLg6fu3770.crl (hash: LkkXCZysa0t7nUBiMG34gSQcW4Ca9SB3oPXMGwInDm0=)
2: FF3178EAB14B11EFB6CD146AC4F9AE02.roa (hash: KPgMUtF2z6om6dSm7+mB/ufWiwTV8TpJVcH2+or0fgs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38 (0x26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E0FE/serialNumber=B02795D2E09E3AAA3E36D2B592D2E0E9FBB7EFBD
Validity
Not Before: Jan 31 06:53:15 2025 GMT
Not After : Feb 7 06:53:15 2025 GMT
Subject: CN=679c735b-84e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9e:4b:23:5f:ed:dd:5b:04:26:90:69:ec:a1:
3f:1b:16:2b:3d:bd:1b:d5:85:d1:0f:1b:43:87:95:
9f:ee:fa:fc:b6:b5:61:e4:7b:a0:02:2d:7a:3d:8d:
0a:2c:a6:25:86:0f:a7:c0:56:10:96:39:fe:e8:d7:
20:d6:7a:c1:15:d2:17:5d:1f:df:a8:f3:34:5e:88:
a8:19:cb:c7:87:25:33:78:ed:73:87:5b:b9:97:61:
73:f4:32:23:63:b7:e2:2e:35:44:20:45:6e:9a:45:
cd:43:8b:78:99:1e:2e:4b:3b:61:24:ce:42:cb:ae:
7d:1b:e2:d4:02:45:c2:45:50:c4:d5:9b:22:32:57:
b6:f4:72:cb:64:bb:c7:f6:be:13:64:72:b0:ed:f2:
d0:75:f9:52:e5:ac:cc:6f:0d:30:18:95:bf:ca:0f:
7a:d6:99:37:19:d1:91:6b:36:f5:41:38:59:4f:db:
70:12:d6:3f:84:1c:97:06:0c:10:c0:11:fd:32:0f:
e0:2e:7f:2e:8c:56:84:2e:0f:e2:91:6e:5a:ea:da:
05:d9:ae:78:e5:61:89:03:8a:81:44:38:7e:c7:09:
52:39:dc:a2:24:9e:b6:77:e8:4c:0d:c9:58:ca:3d:
f6:6d:5e:1c:07:64:1e:58:d1:64:ef:60:11:1c:22:
19:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:BE:F8:1E:FD:53:9F:CE:19:9B:D8:DE:6D:CC:7F:E0:AE:E8:2F:C1
X509v3 Authority Key Identifier:
keyid:B0:27:95:D2:E0:9E:3A:AA:3E:36:D2:B5:92:D2:E0:E9:FB:B7:EF:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E0FE/37334BE2ABCA11EFA994D129C4F9AE02/sCeV0uCeOqo-NtK1ktLg6fu3770.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCeV0uCeOqo-NtK1ktLg6fu3770.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0FE/37334BE2ABCA11EFA994D129C4F9AE02/sCeV0uCeOqo-NtK1ktLg6fu3770.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:98:0f:f6:06:15:ba:23:c2:1a:8a:8b:9a:83:f2:da:11:92:
97:71:b5:73:51:28:77:8b:3b:02:b6:b4:34:08:76:3f:f8:3c:
58:75:6a:9f:fc:fe:20:db:4b:c6:67:43:f0:7e:6e:a4:62:e7:
d2:e2:a1:97:95:da:d0:c1:7e:c6:15:52:d7:29:23:56:c9:45:
c4:21:9e:8f:a3:00:c2:0f:16:c9:72:84:d5:95:0b:bd:30:de:
94:9a:55:04:de:65:e2:aa:0e:71:c7:8c:7f:0f:b1:cc:dd:74:
26:b9:e5:8c:4b:29:9b:6e:8a:22:bc:aa:da:e6:b6:4a:ff:3f:
a2:f3:55:4b:bd:8b:5c:16:54:a8:66:f5:a8:2e:7a:de:13:d6:
82:83:2d:ff:83:2a:8b:57:18:f1:e1:75:9f:83:76:f0:92:e4:
c2:86:2c:7a:70:fd:77:02:ae:1c:4e:52:7a:4f:48:c7:5e:28:
62:e0:96:26:e7:ff:a8:66:8f:52:40:22:d9:eb:10:40:d4:d3:
e8:8e:69:6b:73:61:15:b9:07:c2:d2:fc:2d:61:07:2b:ae:41:
85:f8:62:e5:8f:67:a8:3a:8c:09:2a:1e:41:47:10:a6:ba:4d:
91:1c:a8:35:31:5d:1f:53:35:43:f4:17:1f:d9:24:6a:b8:df:
d8:c8:b6:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:58:19 2025 by rpki-client